NVD Vulnerability Detail
Search Exploit, PoC
CVE-2026-58528
Summary

Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack.

Publication Date July 15, 2026, 3:18 a.m.
Registration Date July 15, 2026, 4:28 a.m.
Last Update July 21, 2026, 3:33 a.m.
CVSS3.1 : MEDIUM
スコア 4.6
Vector CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
攻撃元区分(AV) 物理
攻撃条件の複雑さ(AC) 低
攻撃に必要な特権レベル(PR) 不要
利用者の関与(UI) 不要
影響の想定範囲(S) 変更なし
機密性への影響(C) 高
完全性への影響(I) なし
可用性への影響(A) なし
Affected software configurations
Configuration1 or higher or less more than less than
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:* 10.0.17763.9020
cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:* 10.0.17763.9020
cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:* 10.0.19044.7548
cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:* 10.0.19044.7548
cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:* 10.0.19044.7548
cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:* 10.0.19045.7548
cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:* 10.0.19045.7548
cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:* 10.0.19045.7548
cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:* 10.0.26100.8875
cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:* 10.0.26100.8875
cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:arm64:* 10.0.26200.8875
cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:x64:* 10.0.26200.8875
cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:arm64:* 10.0.28000.2525
cpe:2.3:o:microsoft:windows_11_26h1:*:*:*:*:*:*:x64:* 10.0.28000.2525
cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:-:*:x64:* 10.0.17763.9020
cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:x64:* 10.0.20348.5386
cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:x64:* 10.0.26100.33158
Related information, measures and tools
Common Vulnerabilities List